1. responsible person:
The controller within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:
Nina Lehr
Massbornstrasse 18
60437 Frankfurt am Main
2.Purpose of the processing:
2.1 Collection of general information when visiting our website
When you access our website, i.e. if you do not register or otherwise transmit information, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your internet service provider, your IP address and similar.
It is processed in particular for the following purposes:
-
Ensuring a smooth connection setup of the website,
-
Ensuring the smooth use of our website,
-
Evaluation of system security and stability and
-
For other administrative purposes.
We do not use your data to draw conclusions about your person.
Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.
2.2 Contact form
The data you enter will be stored for the purpose of individual communication with you. This requires you to provide a valid e-mail address and your name. This is used to assign the request and subsequently answer it. The provision of further data is optional.
The data entered in the contact form is processed on the basis of a legitimate interest (Art. 6 para. 1 lit. f GDPR).
By providing the contact form, we would like to make it easy for you to contact us. The information you provide will be stored for the purpose of processing your request and for possible follow-up questions.
If you contact us to request a quote, the data entered in the contact form will be processed to carry out pre-contractual measures (Art. 6 para. 1 lit. b GDPR).
If there is a contractual relationship, we are subject to the statutory retention periods according to the German Commercial Code (HGB) and delete your data after these periods have expired.
2.3 Cookies
So-called "cookies" are used on this website. Cookies are small text files that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit this website. Certain data such as IP address, browser used and operating system are processed. The information contained in cookies can be used to facilitate your navigation and enable the correct display of the web pages. Under no circumstances will the data collected be passed on to third parties or linked to personal data without your consent.
Of course, you can also view the website without cookies. Internet browsers are regularly set to accept cookies. In general, you can deactivate the use of cookies at any time via your browser settings. Please use the help functions of your Internet browser to find out how to change these settings. Please note that individual functions of our website may not work if you have deactivated the use of cookies.
Storage duration and cookies used:
If you allow us to use cookies through your browser settings or consent, the following cookies may be used on our websites:
Name of the cookie, purpose, duration, type of cookie:
-
XSRF-TOKEN, used for security reasons, session, essential
-
hs, used for security reasons, session, essential
-
svSession, used in connection with the user login, 12 months, essential
-
SSR-caching, used to display the system from which the website was rendered, 1 minute, essential
-
_wixCIDX, used for system monitoring/troubleshooting, 3 months, essential
-
_wix_browser_sess, used for system monitoring/troubleshooting, session, essential
-
consent-policy, used for cookie banner parameters, 12 months, essential
-
smSession, is used to identify logged-in website members, session, essential
-
TS*, used for security reasons and to combat fraud, session, essential
-
bSession, used to measure system effectiveness, 30 minutes, essential
-
fedops.logger.X, used to measure system effectiveness, 12 months, essential
-
wixLanguage, used on multilingual websites to store the user's language, 12 months, functional
The storage of information on your end device (e.g. PC, smartphone) and, if applicable, access to information stored in your end device is carried out on the basis of Section 25 (2) No. 2 of the Telecommunications Telemedia Data Protection Act (TDDDG), insofar as the processing of the information is absolutely necessary to enable the use of the website expressly requested by you. Any further storage of information on your terminal device is based on your consent in accordance with Section 25 (1) of the TDDDG. The data processing described in this data protection notice and its legal basis apply solely to the further processing of personal data, insofar as the data was obtained by storing or accessing information on your terminal device.
2.4 Links to social media
Our website contains links to social media services such as Facebook, X (formerly Twitter), Instagram, YouTube, Xing and LinkedIn. After clicking on the respective links or the embedded graphic, you will be redirected to the page of the respective provider. We would like to point out that we do not process your data in this context and assume no responsibility for the content of linked websites. In the event that you follow a link to social media services, please take into account the respective data usage guidelines and data protection notices of these providers.
3. Recipient:
Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.
4. Transfer to a third country or an international organization:
As part of the data processing described above, external service providers are used or, if necessary, commissioned with corresponding services. If service providers receive your personal data as processors, they are strictly bound by our instructions when handling your personal data. The categories of external recipients in detail are:
-
IT service providers, e.g. as part of the administration and hosting of our website or individual services/functionalities
The IT service provider hosting this website has servers and backup servers all over the world, including in the USA. Your personal data may be transferred to the USA. The IT service provider is certified in accordance with the EU-U.S. Data Privacy Framework and the Swiss-U.S. Data Privacy Framework, on which the data transfers are based. Insofar as adequacy decisions for US data transfers based on the aforementioned frameworks do not exist or are not applicable, the respective data transfer is based on standard contractual clauses issued by the European Commission and concluded with the service provider. Otherwise, your personal data will not be transferred to countries outside the EU or the EEA or to international organizations within the meaning of Art. 4 No. 26 GDPR.
5. Storage duration:
The data is deleted as soon as it is no longer required for the purpose for which it was collected. This is generally the case for the data used to provide the website when the respective session has ended.
6. Your data subject rights:
You can exercise the following rights at any time using the contact details provided for our data protection officer:
-
Information about your data stored by us and its processing (Art. 15 GDPR),
-
Correction of incorrect personal data (Art. 16 GDPR),
-
Deletion of your data stored by us (Art. 17 GDPR),
-
Restriction of data processing if we are not yet allowed to delete your data due to legal obligations (Art. 18 GDPR),
-
Objection to the processing of your data by us (Art. 21 GDPR) and
-
Data portability, provided that you have consented to the data processing or have concluded a contract with us (Art. 20 GDPR).
-
If you have given us your consent, you can revoke it at any time with effect for the future.
-
You can contact a supervisory authority at any time with a complaint.
7. Provision prescribed or required:
The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. In addition, individual services may not be available or may be restricted. For this reason, an objection is excluded.
8. Automated decision making including profiling:
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. No such decision-making processes are used in the context of this website and the associated data processing.
9. Changes to our privacy policy:
We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.